CVE-2003-0850

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-11-17 · updated 2026-06-16

Description

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."

Affected products

Dug Song Dsniff: 2.3
Rafal Wojtczuk Libnids: 1.11, 1.12, 1.13, 1.14, 1.16, 1.17

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000773
http://marc.info/?l=bugtraq&m=106728224210446&w=2
http://secunia.com/advisories/10543
http://sourceforge.net/project/shownotes.php?release_id=191323
http://www.debian.org/security/2004/dsa-410
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000773
http://marc.info/?l=bugtraq&m=106728224210446&w=2
http://secunia.com/advisories/10543
http://sourceforge.net/project/shownotes.php?release_id=191323
http://www.debian.org/security/2004/dsa-410

Get alerted when CVE-2003-0850 or the next vulnerability affects your stack